Apparatus and method for user identity authentication in peer-to-peer overlay networks

A credential server having user identity authentication of a peer device joining a peer-to-peer overlay network, the credential server comprising:

• means for receiving a registered user identity from a joining peer device, wherein the registered user identity from the joining peer device is a globally unique identifier;
• means for connecting to a third party identity provider for verification of the registered user identity;
• and
• means for issuing to the joining peer device a signed certificate, upon receiving successful verification of the registered user identity from the third party identity provider, for use by an authenticated peer device in the overlay network to authenticate the registered user identity of the joining peer device, wherein:
• the signed certificate is signed by a private key of the credential server;
• and
• the signed certificate comprises the verified registered user identity, a node identity, and a public key of the joining peer device.

A credential server having user identity authentication of a peer device joining a peer-to-peer overlay network, the credential server comprising:

• a processor configured to:
• receive a registered user identity from a joining peer device, wherein the registered user identity from the joining peer device is a globally unique identifier;
• connect to a third party identity provider for verification of the registered user identity;
• and
• issue to the joining peer device a signed certificate, upon receiving successful verification of the registered user identity from the third party identity provider, for use by an authenticated peer device in the overlay network to authenticate the registered user identity of the joining peer device, wherein:
• the signed certificate is signed by a private key of the credential server;
• and
• the signed certificate comprises the verified registered user identity, a node identity, and a public key of the joining peer device.

A computer program product, comprising:

• non-transitory computer readable medium, comprising:
• code for causing a computer to receive a registered user identity from a joining peer device, wherein the registered user identity from the joining peer device is a globally unique identifier;
• code for causing a computer to connect to a third party identity provider for verification of the registered user identity;
• and
• code for causing a computer to issue to the joining peer device a signed certificate, upon receiving successful verification of the registered user identity from the third party identity provider, for use by an authenticated peer device in an overlay network to authenticate the registered user identity of the joining peer device, wherein:
• the signed certificate is signed by a private key of a credential server;
• and
• the signed certificate comprises the verified registered user identity, a node identity, and a public key of the joining peer device.